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DETAILED ACTION 

1 . The Examiner acknowledges the applicant's submission of the amendment dated 
September 19, 2007. Per the amendment, Claims 1, 2, 9, 11 and 15 have been amended. The 
instant application having Application No. 10/814,475 has a total of 13 claims pending in the 
application; there are 5 independent claims and 8 dependent claims, all of which are ready for 
examination by the examiner. 

1. RESPONSE TO AMENDMENT(S) / ARGUftflENT(S) 

2. Applicant's arguments with respect to the 35 U.S.C. 103(a) rejections of Claims 1-3, 5- 
13 and 15 have been fully considered and are persuasive, but are moot in view of the new 
ground(s) of rejection, as described below. The Examiner notes that the included grounds of 
rejections are similar to those given in the Final Office Action mailed on March 24, 2006 . 

II. REJECTIONS BASED ON PRIOR ART 

Claim Rejections - 35 USC ' 103 - Hubis and Mcllrov 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

4. Claims 1-3. 5-7, 9-12 and 15 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hubis et al (US Patent Number 6,343,324) in view of Mcllrov et al. 
("Multilevel Security in the UNIX Tradition"). 

5. As per Claims 1, 2, 9, 11 and 15 , but more specifically to Claim 1 , Hubis discloses an 
input/output management system for managing input or output from or to a disk device (Hubis, 
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disk drive storage array, column 3 lines 62-65) connected to an operating computer (host 1, 

Figure 2A), comprising: 

a connection information definition block (NURAM 182, Figure 2A) in which the 
relationship of logical connection (port mapping table entry 190, Figure 2B-3) between 
said operating computer and a logical volume (logical volume, column 10 line 33) 
included in said disk device or a logical area (logical volume, column 10 line 33) in a 
logical volume (physical disc drive, column 10 line 32) is defined using computer 
identification information (I/O processor N, figure 2B-3) included in a computer 
identification information definition division (figure 2B-3)\ and 

an input/output execution control block (processor 180, Figure 2A) that controls, 
based on the computer identification information, whether said operating computer is 
enabled to access a logical volume included in said disk device or a logical area in a 
logical volume (column 4 lines 6-8). 

Hubis does not disclose wherein said connection information definition block includes a 
logical volume connection information specification division in which a connected state value 
concerning the connection of said computer is specified in relation to each logical volume 
included in said disk device or each logical area in each logical volume included in said disk 
device, and also wherein the input/output execution control block appends an access key 
having a value to an input/output request to or from said disk device, wherein in the event that 
said access key value is equal to or smaller than said connected state value, input/output to or 
from said disk device is enabled, and wherein in the event that said access key value is greater 
than said connected state value, input/output to or from said disk device is disabled. 

Mcllroy discloses 
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a connected state value (ceiling, section 2, paragraph 1 line 3) concerning the 
connection of said computer (process. Section 2, paragraph 1 line 3) is specified in 
relation to each logical volume (file system, section 2, paragraph 1 line 3), 

wherein the input/output execution control block appends an access key having a 
value to an input/output request to or from said disk device (label, section 2 , para. 1) 

wherein in the event that said access key value is equal to or smaller than said 
connected state value, input/output to or from said disk device is enabled (when a 
process level is lower than the storage label the communication may proceed, otherwise 
it will not, section 2 paragraph 1), and 

wherein in the event that said access key value is greater than said connected 
state value, input/output to or from said disk device is disabled (when a process level is 
lower than the storage label the communication may proceed, otherwise it will not, 
section 2 paragraph 1). 

Hubis and Mcllroy are analogous art in that they both deal with the Unix operating 
system (see Hubis, column 1 lines 41-43, and Mcllroy, section 1, paragraph 1 line 1) and 
validating authorization to access files (see Hubis, column 3 lines 52-59, and Mcllroy, section 1, 
paragraph 2 lines 1-2). At the time of the invention it would have been obvious to one having 
ordinary skill in the art to implement Mcllroy's secure system by adding labels to Hubis' port 
mapping table. 

The motivation for doing so would have been that the Mcllroy's system provides sound, 
practical security (abstract, lines 3-5) and uses security labels to classify information for 
purposes of privacy and integrity (abstract, lines 5-7). 
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Therefore, it would have been obvious at the time of the invention to implement Mcllroy's 
security labels on Hubis' volume management system for the benefit of practical security and for 
purposes of privacy and integrity, to obtain the invention of Claims 1 2, 9, 11 and 15 . 

6. As per Claim 3 , Hubis and Mcllrov disclose an input/output management system 
according to Claim 1, wherein said computer identification information definition division (host 
computer ID map data structure, column 4 lines 10-11) defines physical identification 
information (host computer ID, column 4 line 10) that uniquely indicates said computer 
connected to said disk device is defined. 

7. As per Claim 5 , Hubis and Mcllrov disclose an input/output management system 
according to Claim 2 , wherein said input/output execution control block controls whether each of 
said computers that share the same physical input/output path can access a logical area in a 
logical volume included in said disk device (Hubis, column 4 lines 6-8). 

8. As per Claim 6 , Hubis and Mcllrov disclose an input/output management system 
according to Claim 1 . wherein said connection information definition block comprises: 

Wherein said-computer identification information defines the relationship of 
logical connection (port mapping table entry 191, Figure 2B-3) between said computer 
and a logical volume included in said disk device is defined using port numbers (i/o 
processor number column in port mapping table, Figure 2B-3) assigned to the ports of 
said disk device connected to said computer (port 114-1 through port 114-M in Figure 
2A). 

9. As per Claims 7 and 12 , but more specifically to Claim 7 , Hubis and Mcllrov disclose an 
input/output management system according to Claim 1 , wherein the computer identification 
information is used to control whether each of a plurality of application programs running in said 
operating computer is enabled to access a logical volume included in said disk device or a 
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logical area in a logical volume (Hubis discloses controlling the connection of a computer to a 
disk device, which includes controlling the connection of any applications the computer is 
running, column 4 lines 6-8, where the plurality of applications could be subsets of instructions 
of whatever application the computer is running). 

10. As per Claim 10 , Hubis and Mcllrov disclose an input/output management method 
according to Claim 9 , wherein 

the computer identification information contains physical identification information 

(host world wide name list 153, Figure 2B-1) that uniquely indicates said computer 

connected to said disk device. 



Claim Rejections ■ 35 USC ' 103 - Hubis, Mcllrov and Tang 

1 1 . Claims 8 and 13 are rejected under 35 U.S.C. 103(a) as being unpatentable over Hubis 
et al (US Patent Number 6,343,324) and Mcllrov et al. ("Multilevel Security in the UNIX 
Tradition") as applied to Claims 7 and 11 above, and in further view of Tang et al ("Load 
Distribution via Static Scheduling and Client Redirection for Replicated Web Servers"). 

12. As per Claim 8 , Hubis, Mcllroy and King disclose an input/output management system 
according to Claim 7, wherein 

a plurality of pieces of computer identification information (Hubis, port mapping 
table entry 191, Figure 2B-3) defining whether said computer or each of said application 
programs (subsets of program running on Hubis's host) can access a logical volume 
included in said disk device or a logical area in a logical volume (column 4 lines 6-8). 
Hubis and Mcllroy do not expressly disclose the system further comprising a schedule 
definition division containing said plurality of pieces of computer identification information being 
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specified in relation to respective time zones, and in which a schedule for automatically 
changing the plurality of pieces of computer identification information is predefined. 

Tang discloses a system comprising a schedule definition division containing a plurality 
of pieces of computer identification information (hostname/IP address, section 2. 1 line 3) being 
specified in relation to respective time zones (period of T s , section 2 item 2 line 3J, and in which 
a schedule for automatically changing the plurality of pieces of computer identification 
information is predefined (section 2 item 2). 

Regarding the limitation "a schedule definition division", Tang discloses a scheduler 
generating and storing assignments between client networks and assigned servers (section 2.2 
lines 1-2). Although not expressly mentioned, it is inherent in the storing operation for the 
scheduler to store the assignments in an accessible way in memory. Assignments stored in an 
accessible way in memory can be considered a data structure, and this data structure 
subsequently fulfils the limitation of a schedule definition division. 

Hubis, Mcllroy and Tang are analogous art in that they deal with managing the 
connection relationship between clients accessing data from one of a plurality of storage 
locations. It would have been obvious to someone with ordinary skill in the art to schedule 
connections in Hubis and Mcllroy's storage system with Tang's scheduler. 

Tang discloses that using a scheduler allows user-specific data to be migrated or located 
at a specific storage location (section 1 paragraph 3 lines 11-13) while still keeping the load on 
each storage location balanced (section 1 paragraph 3 lines 13-14). 

Therefore, it would have been obvious to combine the storage system taught by Hubis 
and Mcllroy with the scheduler taught by Tang for the benefit of minimizing data replication and 
balancing the load on each storage location, to obtain the invention as specified in Claim 8. 
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1 3. As per Claim 13 , Hubis and Mcllroy disclose an input/output management method 
according to Claim 1 1, wherein a plurality of pieces of definition information (port mapping table 
entry 191, Figure 2B-3) define whether said computer or each of a plurality of application 
programs running in said computer can access a logical volume included in said disk device or 
a logical area in a logical volume (column 4 lines 6-8). Hubis and Mcllroy do not disclose the 
plurality as being automatically switched with the start of each of time zones according to a 
predefined schedule. 

The limitation "said computer or each of a plurality of application programs running in 
said computer" can be fulfilled by one or more of the limitations "said computer" or "each of a 
plurality of application programs running in said computer". 

Tang discloses a plurality of pieces of definition information as being automatically 
switched (section 2 item 2 lines 3-5) with the start of each of time zones (period of T s , section 2 
item 2 line 3) according to a predefined schedule (section 2 item 2). 

Hubis and Tang are analogous art in that they deal with managing the connection 
relationship between clients accessing data from one of a plurality of storage locations. It would 
have been obvious to someone with ordinary skill in the art to schedule connections in Hubis 
and Mcllroy's storage system with Tang's scheduler. 

Tang discloses that using a scheduler allows user-specific data to be migrated or located 
at a specific storage location (section 1 paragraph 3 lines 11-13) while still keeping the load on 
each storage location balanced (section 1 paragraph 3 lines 13-14). 

Therefore, it would have been obvious to combine the storage system taught by Hubis 
and Mcllroy with the scheduler taught by Tang for the benefit of minimizing data replication and 
balancing the load on each storage location, to obtain the invention as specified in Claim 13. 
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Though not required for the current rejection, the Examiner notes that as per the 
rejection of Claim 7, King ("Operating System Support for Virtual Machines") discloses a 
computer (computer system, section 1 paragraph 1 lines 2-3) including a plurality of applications 
(guest applications, figure "Type I VMM"). 

IX. CLOSING COMMENTS 

14. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office Action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP ' 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing date 
of this final action. 

a. STATUS OF CLAIMS IN THE APPLICATION 

15. The following is a summary of the treatment and status of all claims in the application as 
recommended by M.P.E.P. 1 707.07(i): 

a(1). CLAIMS NO LONGER IN THE APPLICATION 

16. Claims 4, 14 and 16-20 were cancelled by amendment. 
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a(2). CLAIMS REJECTED IN THE APPLICATION 

17. Per the instant office action, Claims 1-3, 5-13 and 15 have received an action on the 
merits and are subject of a final action. 



18. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Sam Dillon whose telephone number is 571- 272-8010 . The examiner can 
normally be reached on 9:30-6:00. 

19. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Saniiv Shah can be reached on 571-272-4098 . The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300 . 



20. Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



b. DIRECTION OF FUTURE CORRESPONDENCES 



IMPORTANT NOTE 





Sam Dillon 



